behavioral detection and other practices for protecting...

45
Behavioral Detection and Other Practices for Protecting Retail from Terrorism Doug Reynolds, Mall of America Michael Rozin, Mall of America Eric White, SACLoss, LLC

Upload: others

Post on 13-Nov-2020

1 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Behavioral Detection and Other Practices for Protecting ...az9194.vo.msecnd.net/pdfs/110902/4113.pdf · – Carlos Bledsoe aka., “Abdul Muhammad” carried out a deadly shooting

Behavioral Detection and Other Practices for Protecting Retail from

TerrorismDoug Reynolds, Mall of AmericaMichael Rozin, Mall of America

Eric White, SACLoss, LLC

Page 2: Behavioral Detection and Other Practices for Protecting ...az9194.vo.msecnd.net/pdfs/110902/4113.pdf · – Carlos Bledsoe aka., “Abdul Muhammad” carried out a deadly shooting

New York, USA

Madrid, Spain

London, UK

Mumbai, India

Moscow, Russia

Oslo, Norway

2

Page 3: Behavioral Detection and Other Practices for Protecting ...az9194.vo.msecnd.net/pdfs/110902/4113.pdf · – Carlos Bledsoe aka., “Abdul Muhammad” carried out a deadly shooting

Adam Gadahn:

“ The fact is, the heroic Fort Hood operation opens up a host of new opportunities…“

“ We must look to further undermine the West's already-struggling economies with carefully timed-and-targeted attacks on symbols of capitalism which will again shake consumer confidence and stifle spending aspects of the Western Crusader culture….”

“ And Brother Nidal didn't unnecessarily raise his security profile or waste money better spent on the operation itself by traveling abroad to acquire skills and instructions which could easily be

acquired at home, or indeed, deduced by using one's own powers of logic and reasoning….

1. Simple Attacks

2. Act Individually

3. Don’t Travel Overseas

4. Choose Easy Targets 3

Page 4: Behavioral Detection and Other Practices for Protecting ...az9194.vo.msecnd.net/pdfs/110902/4113.pdf · – Carlos Bledsoe aka., “Abdul Muhammad” carried out a deadly shooting

Six Issues of Inspire Magazine Objectives:

A) Motivational = Create Intent, Justify Violence

B) Operational = Provide ideas for simple yet effective attacks: Indiscriminate Shooting “Ultimate Mowing Machine” Simple IED – How to make TATP

4

Page 5: Behavioral Detection and Other Practices for Protecting ...az9194.vo.msecnd.net/pdfs/110902/4113.pdf · – Carlos Bledsoe aka., “Abdul Muhammad” carried out a deadly shooting

UK, Terrorist Cell – 2010- Nine men arrested in Britain on terrorism

charges- They found inspiration and bomb-making

instructions in an Inspire magazine

Fort Hood Plot – Nasser Abdo- Materials found in Abdo’s possession

matched exactly to the ingredients outlined in the Inspire’s article: “Making a Bomb in the Kitchen of Your Mom”

5

Page 6: Behavioral Detection and Other Practices for Protecting ...az9194.vo.msecnd.net/pdfs/110902/4113.pdf · – Carlos Bledsoe aka., “Abdul Muhammad” carried out a deadly shooting

• May 20, 2009 - Four Muslim converts were arrested in New York for plotting to bomb two Jewish synagogues and shoot down a military aircraft. The suspects were James Cromitie, David Williams, Onta Williams and Laguerre Payen.

• June 1, 2009 – Carlos Bledsoe aka., “Abdul Muhammad” carried out a deadly shooting at a recruiting station in Little Rock, Arkansas. One soldier was killed and one was injured.

• July 28, 2009 – The FBI arrested seven men in North Carolina as a part of a terrorist conspiracy to wage an Islamic holy war overseas. All seven had received paramilitary training within the US.

• September 19, 2009 – Authorities arrested Najibullah Zazi on terrorism charges. FBI assessment: Zazi’s plot was one of the most serious terror plots since 9/11.

• September 24, 2009 - FBI arrested Hosam Maher Husein Smadi, a Jordanian citizen, after he allegedly placed and attempted to activate a Vehicle Born Improvised Explosive Device (VBIED) in downtown Dallas. Smadi was charged with “attempting to use a weapon of mass destruction”.

6

Page 7: Behavioral Detection and Other Practices for Protecting ...az9194.vo.msecnd.net/pdfs/110902/4113.pdf · – Carlos Bledsoe aka., “Abdul Muhammad” carried out a deadly shooting

• September 24, 2009 – Michael C. Finton (aka, Talib Islam) was arrested by the FBI on charges of attempted murder of federal employees and attempted use of a WMD in connection with a plot to detonate a VBIED in Springfiled, Ill.

• October 21, 2009 – Tarek Mehanna, from Sudbury, MA was arrested on accusations of conspiring with Ahmad Abousamra and others to obtain automatic weapons needed to carry out a shopping mall ambush in which they planned to open fire at US shopping centers.

• November 5, 2009 – Malik Nadal Hasan opened fire at a military processing center in Fort Hood, Texas killing 13 soldiers and wounding 31.

• December 25, 2009 – A Nigerian national, Abdul Farouk Abdulmutallab, attempted to detonate a person-borne improvised explosive device (PBIED) on Northwest Airlines (NWA) flight 253 from Amsterdam to Detroit.

• January 8, 2010 - Adis Medunjanin and Zarein Ahmedzay were arrested in connection with Najibullah Zazi. 7

Page 8: Behavioral Detection and Other Practices for Protecting ...az9194.vo.msecnd.net/pdfs/110902/4113.pdf · – Carlos Bledsoe aka., “Abdul Muhammad” carried out a deadly shooting

• March 9, 2010 - A federal indictment was unsealed against Colleen R. LaRose (Jihad Jane) for her involvement in a plot to carry out murder. She is a US-born, Caucasian, female, convert to Islam

• May 1, 2010 - Faisal Shahzad a U.S. naturalized citizen of Pakistani origin drove a Nissan Pathfinder loaded with gasoline, propane, fireworks and fertilizer into Times Square and attempted to use it as a VBIED.

• May 26, 2010 - Wesam El-Hanafi, a US citizen, charged with conspiring to provide support to al-Qaeda and creating his “own mini-terror cell” in the state of New York.

• June 6, 2010 - Mohamed Mahmood Alessa and Carlos Eduardo Almonte, both of New Jersey, were charged with conspiring to kill or injure persons outside the United States. Both are US citizens.

• September 19, 2010 - Sami Samir Hassoun was arrested early Sunday morning, immediately after placing a backpack which he thought contained an explosive device into a curbside trash receptacle near a Sluggers’ Sports Bar downtown Chicago.

8

Page 9: Behavioral Detection and Other Practices for Protecting ...az9194.vo.msecnd.net/pdfs/110902/4113.pdf · – Carlos Bledsoe aka., “Abdul Muhammad” carried out a deadly shooting

• October 27, 2010 - Farooque Ahmed, a US Citizen, was arrested on charges of plotting to carry out multiple bombing attacks on the Metrorail mass transit system that serves the Washington, D.C. area.

• November 26, 2010 - Mohamed Osman Mohamud, 19, a naturalized U.S. citizen from Somalia was arrested by the FBI and Portland Police after he attempted to detonate what he believed to be an explosives-laden van that was parked near the tree lighting ceremony in Portland’s Pioneer Courthouse Square.

• December 7, 2010 - AwaisYounis ,26, U.S. citizen was arrested by FBI after he allegedly said he was going to set off bombs on the D.C. Metro System. FBI was alerted to threats by an informant before as a plot was developing. according to the Washington Examiner. Younis said he could also put a bomb under a sewer head in Georgetown to "produce the greatest number of casualties”.

• December 8, 2010 - Antonio Martinez, 21, a naturalized U.S. citizen was arrested by FBI after he attempted to blow up a military recruiting center in Catonsville, Maryland. Martinez faces charges of attempted murder of federal officers and attempted use of a weapon of mass destruction.9

Page 10: Behavioral Detection and Other Practices for Protecting ...az9194.vo.msecnd.net/pdfs/110902/4113.pdf · – Carlos Bledsoe aka., “Abdul Muhammad” carried out a deadly shooting

• February 23, 2011 - Khalid Ali-M Aldawsari, 20, a Saudi Arabian national was arrested in Lubbock, Texas on the federal charge of attempted use of a weapon of mass destruction. Potential targets may have included the residence of former President George W. Bush as well as a number of vital infrastructure locations.

• March 3, 2011 – Mohamed Mahmood Alessa, 21, US citizen and Carlos Eduardo Almonte, 24, Naturalized US citizen entered into a packaged plea deal in a Newark federal courtroom Thursday. They admitted to conspiring to kill, maim and kidnap persons outside the United States by trying to join al-Shabab, a designated terrorist organization.

• April 20, 2011 - The perpetrator placed a pipe bomb with two propane tanks in the food court of the Southwest Plaza Mall, in Littleton, Colorado intending to kill and injure a high number of shoppers.

10

Page 11: Behavioral Detection and Other Practices for Protecting ...az9194.vo.msecnd.net/pdfs/110902/4113.pdf · – Carlos Bledsoe aka., “Abdul Muhammad” carried out a deadly shooting

May 11, 2011 - Mohammad Mamdouh, 20, of Moroccan descent, and Ahmed Ferhani, 26, of Algerian descent were arrested in Midtown Manhattan in a sting operation by the NYPD Intelligence Division. The two were allegedly planning to target a synagogue, churches in NYC and the Empire State Building.

June 22, 2011 - Abu Khalid Abdul-Latif, a.k.a. Joseph Anthony Davis, 33, from Seattle, Washington and Walli Mujahidh, a.k.a. Frederick Domingue, Jr., 32, from Los Angeles, California were arrested on allegations of plotting to carry a terrorist attack, involving shooting at military personnel in Seattle, WA.

July 27, 2011 - Naser Jason Abdo, 21, an AWOL U.S. Army soldier, was arrested on allegations of preparing to attack military personnel stationed at Ft. Hood military base. Gunpowder, ammunition, and other items commonly used in the production of improvised explosive devices were found in Abdo’s hotel room.

11

Page 13: Behavioral Detection and Other Practices for Protecting ...az9194.vo.msecnd.net/pdfs/110902/4113.pdf · – Carlos Bledsoe aka., “Abdul Muhammad” carried out a deadly shooting

Satisfy terrorists’ desire for attention Sudden decline in consumer activity Slowdown in the global supply network Damage to brand Destruction of property Injuries, death

EW

Page 14: Behavioral Detection and Other Practices for Protecting ...az9194.vo.msecnd.net/pdfs/110902/4113.pdf · – Carlos Bledsoe aka., “Abdul Muhammad” carried out a deadly shooting

Harden the target Improve communication Identify and prioritize risks Continue to build response capabilities

EW

Page 15: Behavioral Detection and Other Practices for Protecting ...az9194.vo.msecnd.net/pdfs/110902/4113.pdf · – Carlos Bledsoe aka., “Abdul Muhammad” carried out a deadly shooting

Advocate internally - don’t overreact Accept the likelihood at the appropriate level Use skills like Analytical Risk Management inside

of Enterprise Risk Management programs Become world-class public relations experts Influence critical risks, prevent catastrophic risks Have a resiliency plan

EW

Page 16: Behavioral Detection and Other Practices for Protecting ...az9194.vo.msecnd.net/pdfs/110902/4113.pdf · – Carlos Bledsoe aka., “Abdul Muhammad” carried out a deadly shooting

4.2 million square feet Annual economic impact of 1.8 billion USD Approximately 520 tenants; 50 restaurants 42 million visitors annually Attractions: amusement park, aquarium, and

numerous celebrity appearances Expansion planned

DR

Page 17: Behavioral Detection and Other Practices for Protecting ...az9194.vo.msecnd.net/pdfs/110902/4113.pdf · – Carlos Bledsoe aka., “Abdul Muhammad” carried out a deadly shooting

Places of mass gatherings Government facilities Tourist locations Religious institutions Shopping malls Transportation Economic Symbolic

Source: Institute For Counter-Terrorism (ICT), Herzliya, Israel

60K for a 5K

DR

Page 18: Behavioral Detection and Other Practices for Protecting ...az9194.vo.msecnd.net/pdfs/110902/4113.pdf · – Carlos Bledsoe aka., “Abdul Muhammad” carried out a deadly shooting

Person with Harmful Intentions

Means of Attack

MR

Page 19: Behavioral Detection and Other Practices for Protecting ...az9194.vo.msecnd.net/pdfs/110902/4113.pdf · – Carlos Bledsoe aka., “Abdul Muhammad” carried out a deadly shooting

Pre-Incident Cycle

TERRORIST ATTACK

IntelligenceSecurity

Law Enforcement

Timeline

6 Months – 9 Years 10 Minutes - 72 Hours

Response

19

Page 20: Behavioral Detection and Other Practices for Protecting ...az9194.vo.msecnd.net/pdfs/110902/4113.pdf · – Carlos Bledsoe aka., “Abdul Muhammad” carried out a deadly shooting

Traditional Security approach is to attempt to locate the means of attack. However…

MR

Page 21: Behavioral Detection and Other Practices for Protecting ...az9194.vo.msecnd.net/pdfs/110902/4113.pdf · – Carlos Bledsoe aka., “Abdul Muhammad” carried out a deadly shooting

21

Page 22: Behavioral Detection and Other Practices for Protecting ...az9194.vo.msecnd.net/pdfs/110902/4113.pdf · – Carlos Bledsoe aka., “Abdul Muhammad” carried out a deadly shooting

Kozo Okamoto

MR

May 30, 1972 – Lod Airport Massacre

26 people killed and 78 injured

In the early 80’s Israeli Intelligence Services developed the concept of Behavior Detection

Page 23: Behavioral Detection and Other Practices for Protecting ...az9194.vo.msecnd.net/pdfs/110902/4113.pdf · – Carlos Bledsoe aka., “Abdul Muhammad” carried out a deadly shooting

Detect harmful intentions vs. means only Uncovering Aggressors' Illegitimate Profile /

Cover Story Allows a trained eye to detect psychological

reactions to pressure and stress and signs of pre-attack preparations.

MR

Page 24: Behavioral Detection and Other Practices for Protecting ...az9194.vo.msecnd.net/pdfs/110902/4113.pdf · – Carlos Bledsoe aka., “Abdul Muhammad” carried out a deadly shooting

April 17, 1986 Ann Marie-Murphy 32-year-old pregnant Irish woman Hidden inside her suitcase: 2kg of

SEMTEX explosive material and a timing mechanism within a calculator

MR

Page 25: Behavioral Detection and Other Practices for Protecting ...az9194.vo.msecnd.net/pdfs/110902/4113.pdf · – Carlos Bledsoe aka., “Abdul Muhammad” carried out a deadly shooting

Risk Assessment and Mitigation

Mission Statement:Minimize the damage and potential for

occurrence of a terrorist attack on Mall of America property.

That is their sole purpose.

DR

Page 26: Behavioral Detection and Other Practices for Protecting ...az9194.vo.msecnd.net/pdfs/110902/4113.pdf · – Carlos Bledsoe aka., “Abdul Muhammad” carried out a deadly shooting

RAM unit is only one of several circles of security at Mall of America – including other

officers, departments and tenants

DR

Page 27: Behavioral Detection and Other Practices for Protecting ...az9194.vo.msecnd.net/pdfs/110902/4113.pdf · – Carlos Bledsoe aka., “Abdul Muhammad” carried out a deadly shooting

Protected Environment

Physical SecurityAccess ControlNon Security Personnel Perimeter Security

27

Intelligence Information

BEHAVIOR DETECTION

Page 28: Behavioral Detection and Other Practices for Protecting ...az9194.vo.msecnd.net/pdfs/110902/4113.pdf · – Carlos Bledsoe aka., “Abdul Muhammad” carried out a deadly shooting

Identifying Possible Aggressors Methods of Operation (AMOs) at MOA

Focusing on Intentions vs. Means (only) Working “Clandestine” – Visually Undercover Using Covert and Overt Elicitation Techniques Applying Security Interviewing Technique Constant “Red Teaming”

MR

Page 29: Behavioral Detection and Other Practices for Protecting ...az9194.vo.msecnd.net/pdfs/110902/4113.pdf · – Carlos Bledsoe aka., “Abdul Muhammad” carried out a deadly shooting

› Mall of America

› EL AL Airlines

› Ben Gurion International Airport

MR

Page 30: Behavioral Detection and Other Practices for Protecting ...az9194.vo.msecnd.net/pdfs/110902/4113.pdf · – Carlos Bledsoe aka., “Abdul Muhammad” carried out a deadly shooting

0:00:15 sec 0:10-15 min 0:10-20 min

MR

Page 31: Behavioral Detection and Other Practices for Protecting ...az9194.vo.msecnd.net/pdfs/110902/4113.pdf · – Carlos Bledsoe aka., “Abdul Muhammad” carried out a deadly shooting

AMO

Behavior & Appearance

Means

Suspicious Actions

Documents

31

Page 32: Behavioral Detection and Other Practices for Protecting ...az9194.vo.msecnd.net/pdfs/110902/4113.pdf · – Carlos Bledsoe aka., “Abdul Muhammad” carried out a deadly shooting

Security Interviewing is an exchange of questions and answers between a Security/LE officer and a Suspicious

Person that is focused on confirming or refuting suspicious indicators.

MR

Page 33: Behavioral Detection and Other Practices for Protecting ...az9194.vo.msecnd.net/pdfs/110902/4113.pdf · – Carlos Bledsoe aka., “Abdul Muhammad” carried out a deadly shooting

Threat vs. Risk

Suspicion vs. Threat

IF THERE IS A DOUBT, THERE IS NO DOUBT

MR

Threat is Constant while Risk is Variable

Suspicion is a Threat until Refuted

Page 34: Behavioral Detection and Other Practices for Protecting ...az9194.vo.msecnd.net/pdfs/110902/4113.pdf · – Carlos Bledsoe aka., “Abdul Muhammad” carried out a deadly shooting

Change from norms Financial restrictions Public/media ridicule Misperception of program’s intent Lack of law enforcement support Belief that it “can’t happen here” Elitist perception with internal staff

DR

Page 35: Behavioral Detection and Other Practices for Protecting ...az9194.vo.msecnd.net/pdfs/110902/4113.pdf · – Carlos Bledsoe aka., “Abdul Muhammad” carried out a deadly shooting

Technologies Human resources Retail competencies Investment in IP Technology

Leverage LP competencies and programs:

EW

Page 36: Behavioral Detection and Other Practices for Protecting ...az9194.vo.msecnd.net/pdfs/110902/4113.pdf · – Carlos Bledsoe aka., “Abdul Muhammad” carried out a deadly shooting

People Vehicles Objects

MR

Page 37: Behavioral Detection and Other Practices for Protecting ...az9194.vo.msecnd.net/pdfs/110902/4113.pdf · – Carlos Bledsoe aka., “Abdul Muhammad” carried out a deadly shooting

Address immediate danger Notify law enforcement Establish clear criteria and prepare to

move to the next step Proper follow-up

Follow Standard Operating Procedures when responding to a potential threat:

EW

Page 38: Behavioral Detection and Other Practices for Protecting ...az9194.vo.msecnd.net/pdfs/110902/4113.pdf · – Carlos Bledsoe aka., “Abdul Muhammad” carried out a deadly shooting

Protect lives/property/brand Help prevent terrorist attacks against the U.S. Reduce overall crime problems Build relationships/collaboration with law

enforcement Potential reduction in terrorism insurance rates

DR

Page 39: Behavioral Detection and Other Practices for Protecting ...az9194.vo.msecnd.net/pdfs/110902/4113.pdf · – Carlos Bledsoe aka., “Abdul Muhammad” carried out a deadly shooting

You can protect your facility Don’t sharpen the knife after the fight Terrorism is a relevant risk in retail By leveraging current resources and

capabilities, can mitigate the risk significantly

EW

Page 40: Behavioral Detection and Other Practices for Protecting ...az9194.vo.msecnd.net/pdfs/110902/4113.pdf · – Carlos Bledsoe aka., “Abdul Muhammad” carried out a deadly shooting
Page 41: Behavioral Detection and Other Practices for Protecting ...az9194.vo.msecnd.net/pdfs/110902/4113.pdf · – Carlos Bledsoe aka., “Abdul Muhammad” carried out a deadly shooting

Doug Reynolds, Mall of [email protected]

(952) 883.8882

Michael Rozin, Mall of [email protected]

(952) 883.8486

Eric White, SACLoss, [email protected]

(404) 452.4946

Page 42: Behavioral Detection and Other Practices for Protecting ...az9194.vo.msecnd.net/pdfs/110902/4113.pdf · – Carlos Bledsoe aka., “Abdul Muhammad” carried out a deadly shooting

Doug Reynolds has extensive experience in security with a background with the United States military. At the Mall of America, Doug and his staff are responsible for working with the Bloomington Police Department on site as well as other local ,state and federal authorities for the security and protection of regular visitors and celebrities or VIP’s that visit the Mall. Doug directs a staff of approximately 150 officers in the 24-hour operation responsible for the 4.2 million square feet that constitutes Mall of America. On-site, Mall of America also has a full-time counter-terrorism unit that specializes in behavior detection as well as three explosive detection dog teams.

Page 43: Behavioral Detection and Other Practices for Protecting ...az9194.vo.msecnd.net/pdfs/110902/4113.pdf · – Carlos Bledsoe aka., “Abdul Muhammad” carried out a deadly shooting

Michael Rozin served as a Sergeant in a specialized infantry unit in Israeli Defense Forces. After his military service he joined the Israeli Airport Authority as a specialized security agent at Ben-Gurion International Airport in Tel-Aviv. In the USA Michael Rozin has been employed by Mall of America (MOA) as the Special Operations Security Captain as part of MOA Security Department. In this capacity he has developed, implemented and managed a behavior detection unit and variety of additional innovative security programs focused on mitigating the threat of terrorism. Mr. Rozin’s programs have achieved results with national and international magnitude. Mr. Rozin is a graduate of the Institute for Counter-Terrorism in the Interdisciplinary Center in Hertzliya, Israel where he attended a Masters Level Executive Counter-Terrorism Studies program.

Page 44: Behavioral Detection and Other Practices for Protecting ...az9194.vo.msecnd.net/pdfs/110902/4113.pdf · – Carlos Bledsoe aka., “Abdul Muhammad” carried out a deadly shooting

Eric C. White is a recognized expert in loss prevention, homeland security, global retail asset protection, crisis management, executive protection and corporate security. White joined Wal-Mart Stores, Inc. as an In-Store Loss Prevention Associate and was promoted seven times during his 17-year career with the retail giant. In 2010, he was named Chair of the American Board for Certification in Homeland Security (ABCHS) and also serves as a Faculty Instructor. White has served in law enforcement, including the Benton County (Arkansas) Sheriff’s Office, where he attained the rank of major. White holds a Bachelor's degree in Criminology from the Northern Illinois University and a Graduate Certificate in International Security Management from Georgetown University’s School of Continuing Studies.

Page 45: Behavioral Detection and Other Practices for Protecting ...az9194.vo.msecnd.net/pdfs/110902/4113.pdf · – Carlos Bledsoe aka., “Abdul Muhammad” carried out a deadly shooting

Threat Detection and Reaction by Retail Staff (Point of Sale) -https://connect.hsin.gov/p21849699/

DHS Retail Video: "What's in Store - Ordinary People/Extraordinary Events“ - http://www.dhs.gov/multimedia/dhs_retail_video.wmv